Authentication Methods APIs S4Hana Cloud

[StefanieSchulke]

Hi experts,

For my customer I am trying to set up API connections with S4Hana Public Cloud without the use of the BTP (other middleware). I need to configure the communication arrangements for SOAP incoming APIs, OData incoming APIs but also some custom CDS Views of type External API and a Custom Business Object (which I both added to custom communication scenarios).

The security levels of the customer do not accept Basic Authentication for API authentication and they wanted to use IP whitelisting.
I already in the Business Accelerator Hub found that the SOAP API does not support any other authentication method then Basic Authentication. The OData standard API is open for all types of authentication. What is applicable for the Custom CDS Views of type External API and for the Custom Business Object? 
Also, is it possible to whitelist IP ranges to make sure that all attempts outside of that IP range are blocked?

Thanks in advance! 

[Jerry_Lowery]

Hi Stefanie

Could you be a little more specific about the api you want to implement?

For example, on the API Hub, if i look at Bank Statement - Post (https://api.sap.com/api/BANKSTATEMENTPOST_IN/overview) if you click the Authentication Methods, it supports X.509.

Same for BDR https://api.sap.com/api/BDR_REQUEST_IN/overview

Are they using API Management?

here is a similar blog

https://community.sap.com/t5/technology-blogs-by-sap/sap-cloud-identity-now-available-for-all-rise-w...

thanks Jerry

[StefanieSchulke]

.

[StefanieSchulke]

Hi Jerry, the API I need to use is Post Journal Entry - Synchronous SOAP call. Also, I am using a lot of Custom CDS Views of type External API as APIs. Last API that I am using is an API based on a Custom Business Object in S4Hana Cloud.